On Thu, Jan 16, 2003 at 10:15:05AM -0500, John Madden wrote:
> The full report contained within the rest of the message claims that SA is
> looking in the Received headers for the forging, and call me crazy, but I
> don't see any hotmail.com in the Received headers here.

SA 2.43 triggers the FORGED_HOTMAIL_RCVD rule if there is a
hotmail.com From: address, but no Received: header corresponding to the
Hotmail format (like your case).
This has been changed in SA 2.50, which differentiates between a hotmail
address with forgerd hotmail received headers and hotmail address but
no hotmail received (which is called SEMIFORGED_HOTMAIL_RCVD).

-- 
Thomas Mechtersheimer   -   Kleeblatt  2   -   D-42119  Wuppertal   -   Germany
EMail: [EMAIL PROTECTED]                                      IRC-Nick: Mechti
   Of course I'm crazy, but that doesn't mean I'm wrong. I'm mad but not ill


-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache 
Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to